diff --git a/api/backup/router.go b/api/backup/router.go
index 4f105ff1..822e1bbc 100644
--- a/api/backup/router.go
+++ b/api/backup/router.go
@@ -7,7 +7,7 @@ import (
 
 func InitRouter(r *gin.RouterGroup) {
 	r.GET("/backup", middleware.AuthRequired(), CreateBackup)
-	r.POST("/restore", middleware.AuthRequired(), middleware.EncryptedForm(), RestoreBackup)
+	r.POST("/restore", middleware.AuthRequired(), middleware.RequireSecureSession(), middleware.EncryptedForm(), RestoreBackup)
 }
 
 func InitSetupRouter(r *gin.RouterGroup) {